Gitlab News Articles

GitLab's Critical CVSS 10.0 Wake-Up Call: Is Your CI/CD Pipeline Secure?

The Alpine Linux incident reveals why patching GitLab is not enough—and what every business... Tagged with ai, cybersecurity, devops, webdev.

6 days ago

Over 1,000 GitLab servers vulnerable to ongoing RCE attacks

Over 1,000 Internet-exposed GitLab servers are still unpatched against a maximum-severity flaw actively exploited in remote code execution attacks.

6 days ago

Dev Community

Maximum-Severity GitLab Flaw Is Under Active Attack — and It Nearly Broke Into Alpine Linux

CISA has added GitLab's CVE-2026-97229, a perfect 10.0, and a Cisco firewall flaw to its exploited... Tagged with cybersecurity, security, gitlab, news.

6 days ago

Alpine Linux rebuilds GitLab after attempted RCE attack

Hackers attempted to exploit a critical GitLab vulnerability in Alpine Linux's development infrastructure on October 20-21, prompting the open-source project to rebuild its GitLab server and reset all passwords over concerns of a possible compromise.

1 week ago

CISA says max severity GitLab flaw now exploited in the wild

Attackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month, according to the US Cybersecurity and Infrastructure Security Agency (CISA).

1 week ago

Securityweek

Max-Severity GitLab Vulnerability Exploited Against Alpine Linux

Hackers exploited CVE-2026-97229, a max-severity code execution vulnerability in GitLab, against Alpine Linux’s instance.

1 week ago

The Hacker News

Attacker Tried to Exploit Alpine Linux’s GitLab via CVSS 10.0 Flaw Its Ruby Left Open

Alpine Linux rebuilt its GitLab server after an RCE exploit attempt and found that upgrading GitLab alone had left the Ruby flaw unpatched.

1 week ago

Swapupdate

Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws - SwapUpdate

Swati KhandelwalOct 23, 2026Vulnerability / Software Security

2 weeks ago

The Hacker News

Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws

Ruby patched three Onigmo regex bugs that enabled code execution in GitLab when it compiled attacker-controlled patterns.

2 weeks ago

The Cyberwire

GitLab patches a maximum-severity vulnerability.

Threat actors compromise LiteLLM. Amazon detected PHP2Shell exploitation days before disclosure.

2 weeks ago

Webpronews

GitLab Patched Its Own Copy of Ruby to Close a CVSS 10 Hole Spanning 12 Years of Releases

A second critical GitLab release in two weeks fixes CVE-2026-110264, an unauthenticated code execution bug in Ruby's Onigmo regex engine that reaches back to GitLab 7.0. Ruby's own fix is still being backported.

2 weeks ago

theregister

Max-severity GitLab bug allows remote code execution over 12 years of releases

Vendor 'strongly recommends' upgrading to a fixed version 'as soon as possible'

2 weeks ago

The Register

Max-severity GitLab bug allows remote code execution over 12 years of releases

Vendor 'strongly recommends' upgrading to a fixed version 'as soon as possible'

2 weeks ago

Kotaku

The Internet Is Currently On Fire, But How Does That Affect You?

Multiple vulnerabilities have suddenly been reported online, so let's figure out how we got here

2 weeks ago

CVE-2026-110264 CVE-2026-85706

GitLab warns of new max severity code execution vulnerability

GitLab has released security patches for a maximum-severity Regular Expression Compiler flaw that can let remote attackers run arbitrary code on vulnerable servers.

2 weeks ago

The Hacker News

Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases

GitLab fixes CVE-2026-110264, a critical flaw that could allow unauthenticated code execution on self-managed versions dating back to 7.0.

3 weeks ago

Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229) - IT Security News

Overview On October 12, 2026, GitLab released 19.4.2, 19.3.5, and 19.2.8 to fix CVE-2026-97229, an integer overflow in its CI/CD regular-expression handling. The issue was reported through HackerOne by...

3 weeks ago

PoC Exploit Released for Critical GitLab RCE Vulnerability (CVE-2026-97229) - IT Security News

2026-10-16 07:10 A public proof-of-concept (PoC) for CVE-2026-97229 published by researcher Jonah Burgess shows how a flaw in GitLab’s CI/CD regular-expression compiler could be used to run...

3 weeks ago

Cybersecuritynews

PoC Exploit Released for Critical GitLab RCE Vulnerability (CVE-2026-97229)

A public PoC exploits GitLab’s CI/CD regex compiler flaw to execute commands on vulnerable, unpatched servers.

3 weeks ago

Webpronews

GitLab's CVSS 10.0 RCE Exposes Self-Managed Servers as PoC Surfaces

GitLab patched CVE-2026-97229, a CVSS 10.0 integer overflow in its CI/CD regex compiler allowing unauthenticated remote code execution. With a public PoC from Rapid7 and nearly 26,000 exposed hosts per Censys, self-managed users must upgrade immediately to 19.4.2, 19.3.5 or 19.2.8 and rotate secrets...

4 weeks ago

Esecurity Planet

GitLab Warns of CVSS 10.0 Flaw That Could Allow Server Takeover

GitLab urges immediate patches for CVE-2026-97229, a CVSS 10.0 flaw that could allow server takeover. See affected versions and security fixes.

4 weeks ago

IT Security News Roundup: 2026-10-13 Morning - IT Security News

IT Security News: Morning roundup, 2026-10-13 Summary This morning's security news highlights a sharp increase in critical remote code execution flaws across enterprise software, with urgent patches issued for high-severity vulnerabilities in GitLab, Citrix NetScaler, and MarkLogic database servers....

4 weeks ago

Help Net Security

GitLab admins urged to patch critical RCE flaw (CVE-2026-97229) - Help Net Security

GitLab is urging users of self-managed instances to patch a critical vulnerability (CVE-2026-97229) in its CI/CD Regular Expression Compiler.

4 weeks ago